manythings.org Cross Site Scripting vulnerability OBB-3861383

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

manythings.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1147151 Security Researcher pudsec Helped patch 7 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting manythings.org website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO...

manythings.org XSS vulnerability

Open Bug Bounty ID: OBB-713929 Description| Value ---|--- Affected Website:| manythings.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

manythings.org XSS vulnerability

Open Bug Bounty ID: OBB-691832 Description| Value ---|--- Affected Website:| manythings.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

manythings.org XSS vulnerability

Open Bug Bounty ID: OBB-689002 Description| Value ---|--- Affected Website:| manythings.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

manythings.org XSS vulnerability

Open Bug Bounty ID: OBB-617927 Description| Value ---|--- Affected Website:| manythings.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

manythings.org XSS vulnerability

Vulnerable URL: http://www.manythings.org/fq/1/spelling.php?u=1%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| Yes, at 18.06.2017 Latest check for patch:| 18.06.2017 15:29 GMT Vulnerability type:| XSS Vulnerability status:|...

manythings.org XSS vulnerability

Vulnerable URL: http://www.manythings.org/vocabulary/games/k/words.php?f=numbers1-201%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| Yes, at 18.06.2017 Latest check for patch:| 18.06.2017 15:03 GMT Vulnerability type:| XSS...